mirror of
https://github.com/letic/terraform-provider-google.git
synced 2024-10-05 02:01:05 +00:00
80 lines
2.2 KiB
Go
80 lines
2.2 KiB
Go
|
package google
|
||
|
|
||
|
import (
|
||
|
"fmt"
|
||
|
"log"
|
||
|
|
||
|
"strings"
|
||
|
"time"
|
||
|
|
||
|
"github.com/hashicorp/terraform/helper/schema"
|
||
|
iamcredentials "google.golang.org/api/iamcredentials/v1"
|
||
|
)
|
||
|
|
||
|
func dataSourceGoogleServiceAccountAccessToken() *schema.Resource {
|
||
|
|
||
|
return &schema.Resource{
|
||
|
Read: dataSourceGoogleServiceAccountAccessTokenRead,
|
||
|
Schema: map[string]*schema.Schema{
|
||
|
"target_service_account": {
|
||
|
Type: schema.TypeString,
|
||
|
Required: true,
|
||
|
ValidateFunc: validateRegexp("(" + strings.Join(PossibleServiceAccountNames, "|") + ")"),
|
||
|
},
|
||
|
"access_token": {
|
||
|
Type: schema.TypeString,
|
||
|
Sensitive: true,
|
||
|
Computed: true,
|
||
|
},
|
||
|
"scopes": {
|
||
|
Type: schema.TypeSet,
|
||
|
Required: true,
|
||
|
Elem: &schema.Schema{
|
||
|
Type: schema.TypeString,
|
||
|
StateFunc: func(v interface{}) string {
|
||
|
return canonicalizeServiceScope(v.(string))
|
||
|
},
|
||
|
},
|
||
|
// ValidateFunc is not yet supported on lists or sets.
|
||
|
},
|
||
|
"delegates": {
|
||
|
Type: schema.TypeSet,
|
||
|
Optional: true,
|
||
|
Elem: &schema.Schema{
|
||
|
Type: schema.TypeString,
|
||
|
ValidateFunc: validateRegexp(ServiceAccountLinkRegex),
|
||
|
},
|
||
|
},
|
||
|
"lifetime": {
|
||
|
Type: schema.TypeString,
|
||
|
Optional: true,
|
||
|
ValidateFunc: validateDuration(), // duration <=3600s; TODO: support validteDuration(min,max)
|
||
|
Default: "3600s",
|
||
|
},
|
||
|
},
|
||
|
}
|
||
|
}
|
||
|
|
||
|
func dataSourceGoogleServiceAccountAccessTokenRead(d *schema.ResourceData, meta interface{}) error {
|
||
|
config := meta.(*Config)
|
||
|
log.Printf("[INFO] Acquire Service Account AccessToken for %s", d.Get("target_service_account").(string))
|
||
|
|
||
|
service := config.clientIamCredentials
|
||
|
|
||
|
name := fmt.Sprintf("projects/-/serviceAccounts/%s", d.Get("target_service_account").(string))
|
||
|
tokenRequest := &iamcredentials.GenerateAccessTokenRequest{
|
||
|
Lifetime: d.Get("lifetime").(string),
|
||
|
Delegates: convertStringSet(d.Get("delegates").(*schema.Set)),
|
||
|
Scope: canonicalizeServiceScopes(convertStringSet(d.Get("scopes").(*schema.Set))),
|
||
|
}
|
||
|
at, err := service.Projects.ServiceAccounts.GenerateAccessToken(name, tokenRequest).Do()
|
||
|
if err != nil {
|
||
|
return err
|
||
|
}
|
||
|
|
||
|
d.SetId(time.Now().UTC().String())
|
||
|
d.Set("access_token", at.AccessToken)
|
||
|
|
||
|
return nil
|
||
|
}
|